google-apis-securitycenter_v1 0.70.0 → 0.71.0

data/lib/google/apis/securitycenter_v1/service.rb

@@ -443,14 +443,13 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Kicks off an LRO to bulk mute findings for a parent based on a filter. The
-        # parent can be either an organization, folder or project. The findings matched
-        # by the filter will be muted after the LRO is done.
+        # Validates the given Event Threat Detection custom module.
         # @param [String] parent
-        #   Required. The parent, at which bulk action needs to be applied. Its format is "
-        #   organizations/[organization_id]", "folders/[folder_id]", "projects/[project_id]
-        #   ".
-        # @param [Google::Apis::SecuritycenterV1::BulkMuteFindingsRequest] bulk_mute_findings_request_object
+        #   Required. Resource name of the parent to validate the Custom Module under. Its
+        #   format is: * "organizations/`organization`/eventThreatDetectionSettings". * "
+        #   folders/`folder`/eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleRequest] validate_event_threat_detection_custom_module_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -460,34 +459,72 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::Operation] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::Operation]
+        # @return [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def bulk_folder_finding_mute(parent, bulk_mute_findings_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+parent}/findings:bulkMute', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::BulkMuteFindingsRequest::Representation
-          command.request_object = bulk_mute_findings_request_object
-          command.response_representation = Google::Apis::SecuritycenterV1::Operation::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::Operation
+        def validate_folder_event_threat_detection_setting_custom_module(parent, validate_event_threat_detection_custom_module_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}:validateCustomModule', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleRequest::Representation
+          command.request_object = validate_event_threat_detection_custom_module_request_object
+          command.response_representation = Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse
           command.params['parent'] = parent unless parent.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes an existing mute config.
+        # Creates a resident Event Threat Detection custom module at the scope of the
+        # given Resource Manager parent, and also creates inherited custom modules for
+        # all descendants of the given parent. These modules are enabled by default.
+        # @param [String] parent
+        #   Required. The new custom module's parent. Its format is: * "organizations/`
+        #   organization`/eventThreatDetectionSettings". * "folders/`folder`/
+        #   eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] event_threat_detection_custom_module_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_folder_event_threat_detection_setting_custom_module(parent, event_threat_detection_custom_module_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/customModules', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.request_object = event_threat_detection_custom_module_object
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
+          command.params['parent'] = parent unless parent.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes the specified Event Threat Detection custom module and all of its
+        # descendants in the Resource Manager hierarchy. This method is only supported
+        # for resident custom modules.
         # @param [String] name
-        #   Required. Name of the mute config to delete. Its format is organizations/`
-        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
-        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
-        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
-        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
-        #   config_id`.
+        #   Required. Name of the custom module to delete. Its format is: * "organizations/
+        #   `organization`/eventThreatDetectionSettings/customModules/`module`". * "
+        #   folders/`folder`/eventThreatDetectionSettings/customModules/`module`". * "
+        #   projects/`project`/eventThreatDetectionSettings/customModules/`module`".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -505,7 +542,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_folder_location_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
+        def delete_folder_event_threat_detection_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
           command.response_class = Google::Apis::SecuritycenterV1::Empty
@@ -515,14 +552,12 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets a mute config.
+        # Gets an Event Threat Detection custom module.
         # @param [String] name
-        #   Required. Name of the mute config to retrieve. Its format is organizations/`
-        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
-        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
-        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
-        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
-        #   config_id`.
+        #   Required. Name of the custom module to get. Its format is: * "organizations/`
+        #   organization`/eventThreatDetectionSettings/customModules/`module`". * "folders/
+        #   `folder`/eventThreatDetectionSettings/customModules/`module`". * "projects/`
+        #   project`/eventThreatDetectionSettings/customModules/`module`".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -532,35 +567,41 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
+        # @return [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_folder_location_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_folder_event_threat_detection_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Updates a mute config.
-        # @param [String] name
-        #   This field will be ignored if provided on config creation. Format "
-        #   organizations/`organization`/muteConfigs/`mute_config`" "folders/`folder`/
-        #   muteConfigs/`mute_config`" "projects/`project`/muteConfigs/`mute_config`" "
-        #   organizations/`organization`/locations/global/muteConfigs/`mute_config`" "
-        #   folders/`folder`/locations/global/muteConfigs/`mute_config`" "projects/`
-        #   project`/locations/global/muteConfigs/`mute_config`"
-        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] google_cloud_securitycenter_v1_mute_config_object
-        # @param [String] update_mask
-        #   The list of fields to be updated. If empty all mutable fields will be updated.
+        # Lists all Event Threat Detection custom modules for the given Resource Manager
+        # parent. This includes resident modules defined at the scope of the parent
+        # along with modules inherited from ancestors.
+        # @param [String] parent
+        #   Required. Name of the parent to list custom modules under. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Fixnum] page_size
+        #   The maximum number of modules to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `ListEventThreatDetectionCustomModules`
+        #   call. Provide this to retrieve the subsequent page. When paginating, all other
+        #   parameters provided to `ListEventThreatDetectionCustomModules` must match the
+        #   call that provided the page token.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -570,38 +611,43 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
+        # @return [Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_folder_location_mute_config(name, google_cloud_securitycenter_v1_mute_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:patch, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.request_object = google_cloud_securitycenter_v1_mute_config_object
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
-          command.params['name'] = name unless name.nil?
-          command.query['updateMask'] = update_mask unless update_mask.nil?
+        def list_folder_event_threat_detection_setting_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/customModules', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a mute config.
+        # Lists all resident Event Threat Detection custom modules under the given
+        # Resource Manager parent and its descendants.
         # @param [String] parent
-        #   Required. Resource name of the new mute configs's parent. Its format is "
-        #   organizations/[organization_id]", "folders/[folder_id]", or "projects/[
-        #   project_id]".
-        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] google_cloud_securitycenter_v1_mute_config_object
-        # @param [String] mute_config_id
-        #   Required. Unique identifier provided by the client within the parent scope. It
-        #   must consist of only lowercase letters, numbers, and hyphens, must start with
-        #   a letter, must end with either a letter or a number, and must be 63 characters
-        #   or less.
+        #   Required. Name of the parent to list custom modules under. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Fixnum] page_size
+        #   The maximum number of modules to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `
+        #   ListDescendantEventThreatDetectionCustomModules` call. Provide this to
+        #   retrieve the subsequent page. When paginating, all other parameters provided
+        #   to `ListDescendantEventThreatDetectionCustomModules` must match the call that
+        #   provided the page token.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -611,35 +657,41 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
+        # @return [Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_folder_mute_config(parent, google_cloud_securitycenter_v1_mute_config_object = nil, mute_config_id: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+parent}/muteConfigs', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.request_object = google_cloud_securitycenter_v1_mute_config_object
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
+        def list_folder_event_threat_detection_setting_custom_module_descendant(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/customModules:listDescendant', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse
           command.params['parent'] = parent unless parent.nil?
-          command.query['muteConfigId'] = mute_config_id unless mute_config_id.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes an existing mute config.
+        # Updates the Event Threat Detection custom module with the given name based on
+        # the given update mask. Updating the enablement state is supported for both
+        # resident and inherited modules (though resident modules cannot have an
+        # enablement state of "inherited"). Updating the display name or configuration
+        # of a module is supported for resident modules only. The type of a module
+        # cannot be changed.
         # @param [String] name
-        #   Required. Name of the mute config to delete. Its format is organizations/`
-        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
-        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
-        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
-        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
-        #   config_id`.
+        #   Immutable. The resource name of the Event Threat Detection custom module. Its
+        #   format is: * "organizations/`organization`/eventThreatDetectionSettings/
+        #   customModules/`module`". * "folders/`folder`/eventThreatDetectionSettings/
+        #   customModules/`module`". * "projects/`project`/eventThreatDetectionSettings/
+        #   customModules/`module`".
+        # @param [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] event_threat_detection_custom_module_object
+        # @param [String] update_mask
+        #   The list of fields to be updated. If empty all mutable fields will be updated.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -649,32 +701,35 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::Empty] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::Empty]
+        # @return [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_folder_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:delete, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::Empty
+        def patch_folder_event_threat_detection_setting_custom_module(name, event_threat_detection_custom_module_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.request_object = event_threat_detection_custom_module_object
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
           command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Gets a mute config.
+        # Gets an effective Event Threat Detection custom module at the given level.
         # @param [String] name
-        #   Required. Name of the mute config to retrieve. Its format is organizations/`
-        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
-        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
-        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
-        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
-        #   config_id`.
+        #   Required. The resource name of the effective Event Threat Detection custom
+        #   module. Its format is: * "organizations/`organization`/
+        #   eventThreatDetectionSettings/effectiveCustomModules/`module`". * "folders/`
+        #   folder`/eventThreatDetectionSettings/effectiveCustomModules/`module`". * "
+        #   projects/`project`/eventThreatDetectionSettings/effectiveCustomModules/`module`
+        #   ".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -684,37 +739,42 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
+        # @return [Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_folder_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_folder_event_threat_detection_setting_effective_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
+          command.response_representation = Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Lists mute configs.
+        # Lists all effective Event Threat Detection custom modules for the given parent.
+        # This includes resident modules defined at the scope of the parent along with
+        # modules inherited from its ancestors.
         # @param [String] parent
-        #   Required. The parent, which owns the collection of mute configs. Its format is
-        #   "organizations/[organization_id]", "folders/[folder_id]", "projects/[
-        #   project_id]".
+        #   Required. Name of the parent to list custom modules for. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
         # @param [Fixnum] page_size
-        #   The maximum number of configs to return. The service may return fewer than
+        #   The maximum number of modules to return. The service may return fewer than
         #   this value. If unspecified, at most 10 configs will be returned. The maximum
         #   value is 1000; values above 1000 will be coerced to 1000.
         # @param [String] page_token
-        #   A page token, received from a previous `ListMuteConfigs` call. Provide this to
-        #   retrieve the subsequent page. When paginating, all other parameters provided
-        #   to `ListMuteConfigs` must match the call that provided the page token.
+        #   A page token, received from a previous `
+        #   ListEffectiveEventThreatDetectionCustomModules` call. Provide this to retrieve
+        #   the subsequent page. When paginating, all other parameters provided to `
+        #   ListEffectiveEventThreatDetectionCustomModules` must match the call that
+        #   provided the page token.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -724,18 +784,18 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::ListMuteConfigsResponse] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::ListMuteConfigsResponse]
+        # @return [Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_folder_mute_configs(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:get, 'v1/{+parent}/muteConfigs', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::ListMuteConfigsResponse::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::ListMuteConfigsResponse
+        def list_folder_event_threat_detection_setting_effective_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/effectiveCustomModules', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse
           command.params['parent'] = parent unless parent.nil?
           command.query['pageSize'] = page_size unless page_size.nil?
           command.query['pageToken'] = page_token unless page_token.nil?
@@ -744,17 +804,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Updates a mute config.
-        # @param [String] name
-        #   This field will be ignored if provided on config creation. Format "
-        #   organizations/`organization`/muteConfigs/`mute_config`" "folders/`folder`/
-        #   muteConfigs/`mute_config`" "projects/`project`/muteConfigs/`mute_config`" "
-        #   organizations/`organization`/locations/global/muteConfigs/`mute_config`" "
-        #   folders/`folder`/locations/global/muteConfigs/`mute_config`" "projects/`
-        #   project`/locations/global/muteConfigs/`mute_config`"
-        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] google_cloud_securitycenter_v1_mute_config_object
-        # @param [String] update_mask
-        #   The list of fields to be updated. If empty all mutable fields will be updated.
+        # Kicks off an LRO to bulk mute findings for a parent based on a filter. The
+        # parent can be either an organization, folder or project. The findings matched
+        # by the filter will be muted after the LRO is done.
+        # @param [String] parent
+        #   Required. The parent, at which bulk action needs to be applied. Its format is "
+        #   organizations/[organization_id]", "folders/[folder_id]", "projects/[project_id]
+        #   ".
+        # @param [Google::Apis::SecuritycenterV1::BulkMuteFindingsRequest] bulk_mute_findings_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -764,73 +821,34 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::Operation] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
+        # @return [Google::Apis::SecuritycenterV1::Operation]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_folder_mute_config(name, google_cloud_securitycenter_v1_mute_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:patch, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.request_object = google_cloud_securitycenter_v1_mute_config_object
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
-          command.params['name'] = name unless name.nil?
-          command.query['updateMask'] = update_mask unless update_mask.nil?
+        def bulk_folder_finding_mute(parent, bulk_mute_findings_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/findings:bulkMute', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::BulkMuteFindingsRequest::Representation
+          command.request_object = bulk_mute_findings_request_object
+          command.response_representation = Google::Apis::SecuritycenterV1::Operation::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::Operation
+          command.params['parent'] = parent unless parent.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a notification config.
-        # @param [String] parent
-        #   Required. Resource name of the new notification config's parent. Its format is
-        #   "organizations/[organization_id]", "folders/[folder_id]", or "projects/[
-        #   project_id]".
-        # @param [Google::Apis::SecuritycenterV1::NotificationConfig] notification_config_object
-        # @param [String] config_id
-        #   Required. Unique identifier provided by the client within the parent scope. It
-        #   must be between 1 and 128 characters and contain alphanumeric characters,
-        #   underscores, or hyphens only.
-        # @param [String] fields
-        #   Selector specifying which fields to include in a partial response.
-        # @param [String] quota_user
-        #   Available to use for quota purposes for server-side applications. Can be any
-        #   arbitrary string assigned to a user, but should not exceed 40 characters.
-        # @param [Google::Apis::RequestOptions] options
-        #   Request-specific options
-        #
-        # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::NotificationConfig] parsed result object
-        # @yieldparam err [StandardError] error object if request failed
-        #
-        # @return [Google::Apis::SecuritycenterV1::NotificationConfig]
-        #
-        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
-        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
-        # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_folder_notification_config(parent, notification_config_object = nil, config_id: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+parent}/notificationConfigs', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
-          command.request_object = notification_config_object
-          command.response_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::NotificationConfig
-          command.params['parent'] = parent unless parent.nil?
-          command.query['configId'] = config_id unless config_id.nil?
-          command.query['fields'] = fields unless fields.nil?
-          command.query['quotaUser'] = quota_user unless quota_user.nil?
-          execute_or_queue_command(command, &block)
-        end
-        
-        # Deletes a notification config.
+        # Deletes an existing mute config.
         # @param [String] name
-        #   Required. Name of the notification config to delete. Its format is "
-        #   organizations/[organization_id]/notificationConfigs/[config_id]", "folders/[
-        #   folder_id]/notificationConfigs/[config_id]", or "projects/[project_id]/
-        #   notificationConfigs/[config_id]".
+        #   Required. Name of the mute config to delete. Its format is organizations/`
+        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
+        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
+        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
+        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
+        #   config_id`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -848,7 +866,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_folder_notification_config(name, fields: nil, quota_user: nil, options: nil, &block)
+        def delete_folder_location_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
           command.response_class = Google::Apis::SecuritycenterV1::Empty
@@ -858,12 +876,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets a notification config.
+        # Gets a mute config.
         # @param [String] name
-        #   Required. Name of the notification config to get. Its format is "organizations/
-        #   [organization_id]/notificationConfigs/[config_id]", "folders/[folder_id]/
-        #   notificationConfigs/[config_id]", or "projects/[project_id]/
-        #   notificationConfigs/[config_id]".
+        #   Required. Name of the mute config to retrieve. Its format is organizations/`
+        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
+        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
+        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
+        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
+        #   config_id`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -873,77 +893,35 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::NotificationConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::NotificationConfig]
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_folder_notification_config(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_folder_location_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::NotificationConfig
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Lists notification configs.
-        # @param [String] parent
-        #   Required. The name of the parent in which to list the notification
-        #   configurations. Its format is "organizations/[organization_id]", "folders/[
-        #   folder_id]", or "projects/[project_id]".
-        # @param [Fixnum] page_size
-        #   The maximum number of results to return in a single response. Default is 10,
-        #   minimum is 1, maximum is 1000.
-        # @param [String] page_token
-        #   The value returned by the last `ListNotificationConfigsResponse`; indicates
-        #   that this is a continuation of a prior `ListNotificationConfigs` call, and
-        #   that the system should return the next page of data.
-        # @param [String] fields
-        #   Selector specifying which fields to include in a partial response.
-        # @param [String] quota_user
-        #   Available to use for quota purposes for server-side applications. Can be any
-        #   arbitrary string assigned to a user, but should not exceed 40 characters.
-        # @param [Google::Apis::RequestOptions] options
-        #   Request-specific options
-        #
-        # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse] parsed result object
-        # @yieldparam err [StandardError] error object if request failed
-        #
-        # @return [Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse]
-        #
-        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
-        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
-        # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_folder_notification_configs(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:get, 'v1/{+parent}/notificationConfigs', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse
-          command.params['parent'] = parent unless parent.nil?
-          command.query['pageSize'] = page_size unless page_size.nil?
-          command.query['pageToken'] = page_token unless page_token.nil?
-          command.query['fields'] = fields unless fields.nil?
-          command.query['quotaUser'] = quota_user unless quota_user.nil?
-          execute_or_queue_command(command, &block)
-        end
-        
-        # Updates a notification config. The following update fields are allowed:
-        # description, pubsub_topic, streaming_config.filter
+        # Updates a mute config.
         # @param [String] name
-        #   The relative resource name of this notification config. See: https://cloud.
-        #   google.com/apis/design/resource_names#relative_resource_name Example: "
-        #   organizations/`organization_id`/notificationConfigs/notify_public_bucket", "
-        #   folders/`folder_id`/notificationConfigs/notify_public_bucket", or "projects/`
-        #   project_id`/notificationConfigs/notify_public_bucket".
-        # @param [Google::Apis::SecuritycenterV1::NotificationConfig] notification_config_object
+        #   This field will be ignored if provided on config creation. Format "
+        #   organizations/`organization`/muteConfigs/`mute_config`" "folders/`folder`/
+        #   muteConfigs/`mute_config`" "projects/`project`/muteConfigs/`mute_config`" "
+        #   organizations/`organization`/locations/global/muteConfigs/`mute_config`" "
+        #   folders/`folder`/locations/global/muteConfigs/`mute_config`" "projects/`
+        #   project`/locations/global/muteConfigs/`mute_config`"
+        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] google_cloud_securitycenter_v1_mute_config_object
         # @param [String] update_mask
-        #   The FieldMask to use when updating the notification config. If empty all
-        #   mutable fields will be updated.
+        #   The list of fields to be updated. If empty all mutable fields will be updated.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -953,20 +931,20 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::NotificationConfig] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::NotificationConfig]
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_folder_notification_config(name, notification_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def patch_folder_location_mute_config(name, google_cloud_securitycenter_v1_mute_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:patch, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
-          command.request_object = notification_config_object
-          command.response_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::NotificationConfig
+          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.request_object = google_cloud_securitycenter_v1_mute_config_object
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
           command.params['name'] = name unless name.nil?
           command.query['updateMask'] = update_mask unless update_mask.nil?
           command.query['fields'] = fields unless fields.nil?
@@ -974,16 +952,17 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a resident SecurityHealthAnalyticsCustomModule at the scope of the
-        # given CRM parent, and also creates inherited
-        # SecurityHealthAnalyticsCustomModules for all CRM descendants of the given
-        # parent. These modules are enabled by default.
+        # Creates a mute config.
         # @param [String] parent
-        #   Required. Resource name of the new custom module's parent. Its format is "
-        #   organizations/`organization`/securityHealthAnalyticsSettings", "folders/`
-        #   folder`/securityHealthAnalyticsSettings", or "projects/`project`/
-        #   securityHealthAnalyticsSettings"
-        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
+        #   Required. Resource name of the new mute configs's parent. Its format is "
+        #   organizations/[organization_id]", "folders/[folder_id]", or "projects/[
+        #   project_id]".
+        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] google_cloud_securitycenter_v1_mute_config_object
+        # @param [String] mute_config_id
+        #   Required. Unique identifier provided by the client within the parent scope. It
+        #   must consist of only lowercase letters, numbers, and hyphens, must start with
+        #   a letter, must end with either a letter or a number, and must be 63 characters
+        #   or less.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -993,35 +972,35 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule]
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_folder_security_health_analytics_setting_custom_module(parent, google_cloud_securitycenter_v1_security_health_analytics_custom_module_object = nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+parent}/customModules', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule::Representation
-          command.request_object = google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule
+        def create_folder_mute_config(parent, google_cloud_securitycenter_v1_mute_config_object = nil, mute_config_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/muteConfigs', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.request_object = google_cloud_securitycenter_v1_mute_config_object
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
           command.params['parent'] = parent unless parent.nil?
+          command.query['muteConfigId'] = mute_config_id unless mute_config_id.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes the specified SecurityHealthAnalyticsCustomModule and all of its
-        # descendants in the CRM hierarchy. This method is only supported for resident
-        # custom modules.
+        # Deletes an existing mute config.
         # @param [String] name
-        #   Required. Name of the custom module to delete. Its format is "organizations/`
-        #   organization`/securityHealthAnalyticsSettings/customModules/`customModule`", "
-        #   folders/`folder`/securityHealthAnalyticsSettings/customModules/`customModule`",
-        #   or "projects/`project`/securityHealthAnalyticsSettings/customModules/`
-        #   customModule`"
+        #   Required. Name of the mute config to delete. Its format is organizations/`
+        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
+        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
+        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
+        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
+        #   config_id`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1039,7 +1018,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_folder_security_health_analytics_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
+        def delete_folder_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
           command.response_class = Google::Apis::SecuritycenterV1::Empty
@@ -1049,13 +1028,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Retrieves a SecurityHealthAnalyticsCustomModule.
+        # Gets a mute config.
         # @param [String] name
-        #   Required. Name of the custom module to get. Its format is "organizations/`
-        #   organization`/securityHealthAnalyticsSettings/customModules/`customModule`", "
-        #   folders/`folder`/securityHealthAnalyticsSettings/customModules/`customModule`",
-        #   or "projects/`project`/securityHealthAnalyticsSettings/customModules/`
-        #   customModule`"
+        #   Required. Name of the mute config to retrieve. Its format is organizations/`
+        #   organization`/muteConfigs/`config_id`, folders/`folder`/muteConfigs/`config_id`
+        #   , projects/`project`/muteConfigs/`config_id`, organizations/`organization`/
+        #   locations/global/muteConfigs/`config_id`, folders/`folder`/locations/global/
+        #   muteConfigs/`config_id`, or projects/`project`/locations/global/muteConfigs/`
+        #   config_id`.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1065,37 +1045,37 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule]
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_folder_security_health_analytics_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_folder_mute_config(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Returns a list of all SecurityHealthAnalyticsCustomModules for the given
-        # parent. This includes resident modules defined at the scope of the parent, and
-        # inherited modules, inherited from CRM ancestors.
+        # Lists mute configs.
         # @param [String] parent
-        #   Required. Name of parent to list custom modules. Its format is "organizations/`
-        #   organization`/securityHealthAnalyticsSettings", "folders/`folder`/
-        #   securityHealthAnalyticsSettings", or "projects/`project`/
-        #   securityHealthAnalyticsSettings"
+        #   Required. The parent, which owns the collection of mute configs. Its format is
+        #   "organizations/[organization_id]", "folders/[folder_id]", "projects/[
+        #   project_id]".
         # @param [Fixnum] page_size
-        #   The maximum number of results to return in a single response. Default is 10,
-        #   minimum is 1, maximum is 1000.
+        #   The maximum number of configs to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
         # @param [String] page_token
-        #   The value returned by the last call indicating a continuation
+        #   A page token, received from a previous `ListMuteConfigs` call. Provide this to
+        #   retrieve the subsequent page. When paginating, all other parameters provided
+        #   to `ListMuteConfigs` must match the call that provided the page token.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -1105,18 +1085,18 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListMuteConfigsResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse]
+        # @return [Google::Apis::SecuritycenterV1::ListMuteConfigsResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_folder_security_health_analytics_setting_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:get, 'v1/{+parent}/customModules', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse
+        def list_folder_mute_configs(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/muteConfigs', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListMuteConfigsResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListMuteConfigsResponse
           command.params['parent'] = parent unless parent.nil?
           command.query['pageSize'] = page_size unless page_size.nil?
           command.query['pageToken'] = page_token unless page_token.nil?
@@ -1125,11 +1105,392 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Returns a list of all resident SecurityHealthAnalyticsCustomModules under the
-        # given CRM parent and all of the parent’s CRM descendants.
-        # @param [String] parent
-        #   Required. Name of parent to list descendant custom modules. Its format is "
-        #   organizations/`organization`/securityHealthAnalyticsSettings", "folders/`
+        # Updates a mute config.
+        # @param [String] name
+        #   This field will be ignored if provided on config creation. Format "
+        #   organizations/`organization`/muteConfigs/`mute_config`" "folders/`folder`/
+        #   muteConfigs/`mute_config`" "projects/`project`/muteConfigs/`mute_config`" "
+        #   organizations/`organization`/locations/global/muteConfigs/`mute_config`" "
+        #   folders/`folder`/locations/global/muteConfigs/`mute_config`" "projects/`
+        #   project`/locations/global/muteConfigs/`mute_config`"
+        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] google_cloud_securitycenter_v1_mute_config_object
+        # @param [String] update_mask
+        #   The list of fields to be updated. If empty all mutable fields will be updated.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def patch_folder_mute_config(name, google_cloud_securitycenter_v1_mute_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.request_object = google_cloud_securitycenter_v1_mute_config_object
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1MuteConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Creates a notification config.
+        # @param [String] parent
+        #   Required. Resource name of the new notification config's parent. Its format is
+        #   "organizations/[organization_id]", "folders/[folder_id]", or "projects/[
+        #   project_id]".
+        # @param [Google::Apis::SecuritycenterV1::NotificationConfig] notification_config_object
+        # @param [String] config_id
+        #   Required. Unique identifier provided by the client within the parent scope. It
+        #   must be between 1 and 128 characters and contain alphanumeric characters,
+        #   underscores, or hyphens only.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::NotificationConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::NotificationConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_folder_notification_config(parent, notification_config_object = nil, config_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/notificationConfigs', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
+          command.request_object = notification_config_object
+          command.response_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::NotificationConfig
+          command.params['parent'] = parent unless parent.nil?
+          command.query['configId'] = config_id unless config_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes a notification config.
+        # @param [String] name
+        #   Required. Name of the notification config to delete. Its format is "
+        #   organizations/[organization_id]/notificationConfigs/[config_id]", "folders/[
+        #   folder_id]/notificationConfigs/[config_id]", or "projects/[project_id]/
+        #   notificationConfigs/[config_id]".
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::Empty] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::Empty]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_folder_notification_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::Empty
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets a notification config.
+        # @param [String] name
+        #   Required. Name of the notification config to get. Its format is "organizations/
+        #   [organization_id]/notificationConfigs/[config_id]", "folders/[folder_id]/
+        #   notificationConfigs/[config_id]", or "projects/[project_id]/
+        #   notificationConfigs/[config_id]".
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::NotificationConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::NotificationConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_folder_notification_config(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::NotificationConfig
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists notification configs.
+        # @param [String] parent
+        #   Required. The name of the parent in which to list the notification
+        #   configurations. Its format is "organizations/[organization_id]", "folders/[
+        #   folder_id]", or "projects/[project_id]".
+        # @param [Fixnum] page_size
+        #   The maximum number of results to return in a single response. Default is 10,
+        #   minimum is 1, maximum is 1000.
+        # @param [String] page_token
+        #   The value returned by the last `ListNotificationConfigsResponse`; indicates
+        #   that this is a continuation of a prior `ListNotificationConfigs` call, and
+        #   that the system should return the next page of data.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_folder_notification_configs(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/notificationConfigs', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListNotificationConfigsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates a notification config. The following update fields are allowed:
+        # description, pubsub_topic, streaming_config.filter
+        # @param [String] name
+        #   The relative resource name of this notification config. See: https://cloud.
+        #   google.com/apis/design/resource_names#relative_resource_name Example: "
+        #   organizations/`organization_id`/notificationConfigs/notify_public_bucket", "
+        #   folders/`folder_id`/notificationConfigs/notify_public_bucket", or "projects/`
+        #   project_id`/notificationConfigs/notify_public_bucket".
+        # @param [Google::Apis::SecuritycenterV1::NotificationConfig] notification_config_object
+        # @param [String] update_mask
+        #   The FieldMask to use when updating the notification config. If empty all
+        #   mutable fields will be updated.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::NotificationConfig] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::NotificationConfig]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def patch_folder_notification_config(name, notification_config_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
+          command.request_object = notification_config_object
+          command.response_representation = Google::Apis::SecuritycenterV1::NotificationConfig::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::NotificationConfig
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Creates a resident SecurityHealthAnalyticsCustomModule at the scope of the
+        # given CRM parent, and also creates inherited
+        # SecurityHealthAnalyticsCustomModules for all CRM descendants of the given
+        # parent. These modules are enabled by default.
+        # @param [String] parent
+        #   Required. Resource name of the new custom module's parent. Its format is "
+        #   organizations/`organization`/securityHealthAnalyticsSettings", "folders/`
+        #   folder`/securityHealthAnalyticsSettings", or "projects/`project`/
+        #   securityHealthAnalyticsSettings"
+        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_folder_security_health_analytics_setting_custom_module(parent, google_cloud_securitycenter_v1_security_health_analytics_custom_module_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/customModules', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule::Representation
+          command.request_object = google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule
+          command.params['parent'] = parent unless parent.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes the specified SecurityHealthAnalyticsCustomModule and all of its
+        # descendants in the CRM hierarchy. This method is only supported for resident
+        # custom modules.
+        # @param [String] name
+        #   Required. Name of the custom module to delete. Its format is "organizations/`
+        #   organization`/securityHealthAnalyticsSettings/customModules/`customModule`", "
+        #   folders/`folder`/securityHealthAnalyticsSettings/customModules/`customModule`",
+        #   or "projects/`project`/securityHealthAnalyticsSettings/customModules/`
+        #   customModule`"
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::Empty] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::Empty]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_folder_security_health_analytics_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::Empty
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Retrieves a SecurityHealthAnalyticsCustomModule.
+        # @param [String] name
+        #   Required. Name of the custom module to get. Its format is "organizations/`
+        #   organization`/securityHealthAnalyticsSettings/customModules/`customModule`", "
+        #   folders/`folder`/securityHealthAnalyticsSettings/customModules/`customModule`",
+        #   or "projects/`project`/securityHealthAnalyticsSettings/customModules/`
+        #   customModule`"
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_folder_security_health_analytics_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Returns a list of all SecurityHealthAnalyticsCustomModules for the given
+        # parent. This includes resident modules defined at the scope of the parent, and
+        # inherited modules, inherited from CRM ancestors.
+        # @param [String] parent
+        #   Required. Name of parent to list custom modules. Its format is "organizations/`
+        #   organization`/securityHealthAnalyticsSettings", "folders/`folder`/
+        #   securityHealthAnalyticsSettings", or "projects/`project`/
+        #   securityHealthAnalyticsSettings"
+        # @param [Fixnum] page_size
+        #   The maximum number of results to return in a single response. Default is 10,
+        #   minimum is 1, maximum is 1000.
+        # @param [String] page_token
+        #   The value returned by the last call indicating a continuation
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_folder_security_health_analytics_setting_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/customModules', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListSecurityHealthAnalyticsCustomModulesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Returns a list of all resident SecurityHealthAnalyticsCustomModules under the
+        # given CRM parent and all of the parent’s CRM descendants.
+        # @param [String] parent
+        #   Required. Name of parent to list descendant custom modules. Its format is "
+        #   organizations/`organization`/securityHealthAnalyticsSettings", "folders/`
         #   folder`/securityHealthAnalyticsSettings", or "projects/`project`/
         #   securityHealthAnalyticsSettings"
         # @param [Fixnum] page_size
@@ -1181,7 +1542,9 @@ module Google
         #   numeric id containing 1-20 digits.
         # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
         # @param [String] update_mask
-        #   The list of fields to update.
+        #   The list of fields to be updated. The only fields that can be updated are `
+        #   enablement_state` and `custom_config`. If empty or set to the wildcard value `*
+        #   `, both `enablement_state` and `custom_config` are updated.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -2229,7 +2592,9 @@ module Google
         # Validates the given Event Threat Detection custom module.
         # @param [String] parent
         #   Required. Resource name of the parent to validate the Custom Module under. Its
-        #   format is: * "organizations/`organization`/eventThreatDetectionSettings".
+        #   format is: * "organizations/`organization`/eventThreatDetectionSettings". * "
+        #   folders/`folder`/eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
         # @param [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleRequest] validate_event_threat_detection_custom_module_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -2260,10 +2625,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Creates an Event Threat Detection custom module.
+        # Creates a resident Event Threat Detection custom module at the scope of the
+        # given Resource Manager parent, and also creates inherited custom modules for
+        # all descendants of the given parent. These modules are enabled by default.
         # @param [String] parent
         #   Required. The new custom module's parent. Its format is: * "organizations/`
-        #   organization`/eventThreatDetectionSettings".
+        #   organization`/eventThreatDetectionSettings". * "folders/`folder`/
+        #   eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
         # @param [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] event_threat_detection_custom_module_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
@@ -2294,10 +2663,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes an Event Threat Detection custom module.
+        # Deletes the specified Event Threat Detection custom module and all of its
+        # descendants in the Resource Manager hierarchy. This method is only supported
+        # for resident custom modules.
         # @param [String] name
         #   Required. Name of the custom module to delete. Its format is: * "organizations/
-        #   `organization`/eventThreatDetectionSettings/customModules/`module`".
+        #   `organization`/eventThreatDetectionSettings/customModules/`module`". * "
+        #   folders/`folder`/eventThreatDetectionSettings/customModules/`module`". * "
+        #   projects/`project`/eventThreatDetectionSettings/customModules/`module`".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -2328,7 +2701,9 @@ module Google
         # Gets an Event Threat Detection custom module.
         # @param [String] name
         #   Required. Name of the custom module to get. Its format is: * "organizations/`
-        #   organization`/eventThreatDetectionSettings/customModules/`module`".
+        #   organization`/eventThreatDetectionSettings/customModules/`module`". * "folders/
+        #   `folder`/eventThreatDetectionSettings/customModules/`module`". * "projects/`
+        #   project`/eventThreatDetectionSettings/customModules/`module`".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -2356,10 +2731,14 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Lists Event Threat Detection custom modules.
+        # Lists all Event Threat Detection custom modules for the given Resource Manager
+        # parent. This includes resident modules defined at the scope of the parent
+        # along with modules inherited from ancestors.
         # @param [String] parent
         #   Required. Name of the parent to list custom modules under. Its format is: * "
-        #   organizations/`organization`/eventThreatDetectionSettings".
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
         # @param [Fixnum] page_size
         #   The maximum number of modules to return. The service may return fewer than
         #   this value. If unspecified, at most 10 configs will be returned. The maximum
@@ -2398,7 +2777,58 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Updates an Event Threat Detection custom module.
+        # Lists all resident Event Threat Detection custom modules under the given
+        # Resource Manager parent and its descendants.
+        # @param [String] parent
+        #   Required. Name of the parent to list custom modules under. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Fixnum] page_size
+        #   The maximum number of modules to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `
+        #   ListDescendantEventThreatDetectionCustomModules` call. Provide this to
+        #   retrieve the subsequent page. When paginating, all other parameters provided
+        #   to `ListDescendantEventThreatDetectionCustomModules` must match the call that
+        #   provided the page token.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_organization_event_threat_detection_setting_custom_module_descendant(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/customModules:listDescendant', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the Event Threat Detection custom module with the given name based on
+        # the given update mask. Updating the enablement state is supported for both
+        # resident and inherited modules (though resident modules cannot have an
+        # enablement state of "inherited"). Updating the display name or configuration
+        # of a module is supported for resident modules only. The type of a module
+        # cannot be changed.
         # @param [String] name
         #   Immutable. The resource name of the Event Threat Detection custom module. Its
         #   format is: * "organizations/`organization`/eventThreatDetectionSettings/
@@ -2425,14 +2855,96 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_organization_event_threat_detection_setting_custom_module(name, event_threat_detection_custom_module_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:patch, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
-          command.request_object = event_threat_detection_custom_module_object
-          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
-          command.params['name'] = name unless name.nil?
-          command.query['updateMask'] = update_mask unless update_mask.nil?
+        def patch_organization_event_threat_detection_setting_custom_module(name, event_threat_detection_custom_module_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.request_object = event_threat_detection_custom_module_object
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets an effective Event Threat Detection custom module at the given level.
+        # @param [String] name
+        #   Required. The resource name of the effective Event Threat Detection custom
+        #   module. Its format is: * "organizations/`organization`/
+        #   eventThreatDetectionSettings/effectiveCustomModules/`module`". * "folders/`
+        #   folder`/eventThreatDetectionSettings/effectiveCustomModules/`module`". * "
+        #   projects/`project`/eventThreatDetectionSettings/effectiveCustomModules/`module`
+        #   ".
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_organization_event_threat_detection_setting_effective_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists all effective Event Threat Detection custom modules for the given parent.
+        # This includes resident modules defined at the scope of the parent along with
+        # modules inherited from its ancestors.
+        # @param [String] parent
+        #   Required. Name of the parent to list custom modules for. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Fixnum] page_size
+        #   The maximum number of modules to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `
+        #   ListEffectiveEventThreatDetectionCustomModules` call. Provide this to retrieve
+        #   the subsequent page. When paginating, all other parameters provided to `
+        #   ListEffectiveEventThreatDetectionCustomModules` must match the call that
+        #   provided the page token.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_organization_event_threat_detection_setting_effective_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/effectiveCustomModules', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
@@ -3493,7 +4005,9 @@ module Google
         #   numeric id containing 1-20 digits.
         # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
         # @param [String] update_mask
-        #   The list of fields to update.
+        #   The list of fields to be updated. The only fields that can be updated are `
+        #   enablement_state` and `custom_config`. If empty or set to the wildcard value `*
+        #   `, both `enablement_state` and `custom_config` are updated.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -4715,47 +5229,278 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::ListAssetsResponse] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListAssetsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListAssetsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_assets(parent, compare_duration: nil, field_mask: nil, filter: nil, order_by: nil, page_size: nil, page_token: nil, read_time: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/assets', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListAssetsResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListAssetsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['compareDuration'] = compare_duration unless compare_duration.nil?
+          command.query['fieldMask'] = field_mask unless field_mask.nil?
+          command.query['filter'] = filter unless filter.nil?
+          command.query['orderBy'] = order_by unless order_by.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['readTime'] = read_time unless read_time.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates security marks.
+        # @param [String] name
+        #   The relative resource name of the SecurityMarks. See: https://cloud.google.com/
+        #   apis/design/resource_names#relative_resource_name Examples: "organizations/`
+        #   organization_id`/assets/`asset_id`/securityMarks" "organizations/`
+        #   organization_id`/sources/`source_id`/findings/`finding_id`/securityMarks".
+        # @param [Google::Apis::SecuritycenterV1::SecurityMarks] security_marks_object
+        # @param [String] start_time
+        #   The time at which the updated SecurityMarks take effect. If not set uses
+        #   current server time. Updates will be applied to the SecurityMarks that are
+        #   active immediately preceding this time. Must be earlier or equal to the server
+        #   time.
+        # @param [String] update_mask
+        #   The FieldMask to use when updating the security marks resource. The field mask
+        #   must not contain duplicate fields. If empty or set to "marks", all marks will
+        #   be replaced. Individual marks can be updated using "marks.".
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::SecurityMarks] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::SecurityMarks]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def update_project_asset_security_marks(name, security_marks_object = nil, start_time: nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::SecurityMarks::Representation
+          command.request_object = security_marks_object
+          command.response_representation = Google::Apis::SecuritycenterV1::SecurityMarks::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::SecurityMarks
+          command.params['name'] = name unless name.nil?
+          command.query['startTime'] = start_time unless start_time.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Creates a BigQuery export.
+        # @param [String] parent
+        #   Required. The name of the parent resource of the new BigQuery export. Its
+        #   format is "organizations/[organization_id]", "folders/[folder_id]", or "
+        #   projects/[project_id]".
+        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] google_cloud_securitycenter_v1_big_query_export_object
+        # @param [String] big_query_export_id
+        #   Required. Unique identifier provided by the client within the parent scope. It
+        #   must consist of only lowercase letters, numbers, and hyphens, must start with
+        #   a letter, must end with either a letter or a number, and must be 63 characters
+        #   or less.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def create_project_big_query_export(parent, google_cloud_securitycenter_v1_big_query_export_object = nil, big_query_export_id: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/bigQueryExports', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
+          command.request_object = google_cloud_securitycenter_v1_big_query_export_object
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport
+          command.params['parent'] = parent unless parent.nil?
+          command.query['bigQueryExportId'] = big_query_export_id unless big_query_export_id.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Deletes an existing BigQuery export.
+        # @param [String] name
+        #   Required. The name of the BigQuery export to delete. Its format is
+        #   organizations/`organization`/bigQueryExports/`export_id`, folders/`folder`/
+        #   bigQueryExports/`export_id`, or projects/`project`/bigQueryExports/`export_id`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::Empty] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::Empty]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def delete_project_big_query_export(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:delete, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::Empty
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Gets a BigQuery export.
+        # @param [String] name
+        #   Required. Name of the BigQuery export to retrieve. Its format is organizations/
+        #   `organization`/bigQueryExports/`export_id`, folders/`folder`/bigQueryExports/`
+        #   export_id`, or projects/`project`/bigQueryExports/`export_id`
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_big_query_export(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists BigQuery exports. Note that when requesting BigQuery exports at a given
+        # level all exports under that level are also returned e.g. if requesting
+        # BigQuery exports under a folder, then all BigQuery exports immediately under
+        # the folder plus the ones created under the projects within the folder are
+        # returned.
+        # @param [String] parent
+        #   Required. The parent, which owns the collection of BigQuery exports. Its
+        #   format is "organizations/[organization_id]", "folders/[folder_id]", "projects/[
+        #   project_id]".
+        # @param [Fixnum] page_size
+        #   The maximum number of configs to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `ListBigQueryExports` call. Provide
+        #   this to retrieve the subsequent page. When paginating, all other parameters
+        #   provided to `ListBigQueryExports` must match the call that provided the page
+        #   token.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_big_query_exports(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/bigQueryExports', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates a BigQuery export.
+        # @param [String] name
+        #   The relative resource name of this export. See: https://cloud.google.com/apis/
+        #   design/resource_names#relative_resource_name. Example format: "organizations/`
+        #   organization_id`/bigQueryExports/`export_id`" Example format: "folders/`
+        #   folder_id`/bigQueryExports/`export_id`" Example format: "projects/`project_id`/
+        #   bigQueryExports/`export_id`" This field is provided in responses, and is
+        #   ignored when provided in create requests.
+        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] google_cloud_securitycenter_v1_big_query_export_object
+        # @param [String] update_mask
+        #   The list of fields to be updated. If empty all mutable fields will be updated.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::ListAssetsResponse]
+        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_project_assets(parent, compare_duration: nil, field_mask: nil, filter: nil, order_by: nil, page_size: nil, page_token: nil, read_time: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:get, 'v1/{+parent}/assets', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::ListAssetsResponse::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::ListAssetsResponse
-          command.params['parent'] = parent unless parent.nil?
-          command.query['compareDuration'] = compare_duration unless compare_duration.nil?
-          command.query['fieldMask'] = field_mask unless field_mask.nil?
-          command.query['filter'] = filter unless filter.nil?
-          command.query['orderBy'] = order_by unless order_by.nil?
-          command.query['pageSize'] = page_size unless page_size.nil?
-          command.query['pageToken'] = page_token unless page_token.nil?
-          command.query['readTime'] = read_time unless read_time.nil?
+        def patch_project_big_query_export(name, google_cloud_securitycenter_v1_big_query_export_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:patch, 'v1/{+name}', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
+          command.request_object = google_cloud_securitycenter_v1_big_query_export_object
+          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport
+          command.params['name'] = name unless name.nil?
+          command.query['updateMask'] = update_mask unless update_mask.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Updates security marks.
-        # @param [String] name
-        #   The relative resource name of the SecurityMarks. See: https://cloud.google.com/
-        #   apis/design/resource_names#relative_resource_name Examples: "organizations/`
-        #   organization_id`/assets/`asset_id`/securityMarks" "organizations/`
-        #   organization_id`/sources/`source_id`/findings/`finding_id`/securityMarks".
-        # @param [Google::Apis::SecuritycenterV1::SecurityMarks] security_marks_object
-        # @param [String] start_time
-        #   The time at which the updated SecurityMarks take effect. If not set uses
-        #   current server time. Updates will be applied to the SecurityMarks that are
-        #   active immediately preceding this time. Must be earlier or equal to the server
-        #   time.
-        # @param [String] update_mask
-        #   The FieldMask to use when updating the security marks resource. The field mask
-        #   must not contain duplicate fields. If empty or set to "marks", all marks will
-        #   be replaced. Individual marks can be updated using "marks.".
+        # Validates the given Event Threat Detection custom module.
+        # @param [String] parent
+        #   Required. Resource name of the parent to validate the Custom Module under. Its
+        #   format is: * "organizations/`organization`/eventThreatDetectionSettings". * "
+        #   folders/`folder`/eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleRequest] validate_event_threat_detection_custom_module_request_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -4765,39 +5510,35 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::SecurityMarks] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::SecurityMarks]
+        # @return [Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def update_project_asset_security_marks(name, security_marks_object = nil, start_time: nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:patch, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::SecurityMarks::Representation
-          command.request_object = security_marks_object
-          command.response_representation = Google::Apis::SecuritycenterV1::SecurityMarks::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::SecurityMarks
-          command.params['name'] = name unless name.nil?
-          command.query['startTime'] = start_time unless start_time.nil?
-          command.query['updateMask'] = update_mask unless update_mask.nil?
+        def validate_project_event_threat_detection_setting_custom_module(parent, validate_event_threat_detection_custom_module_request_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}:validateCustomModule', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleRequest::Representation
+          command.request_object = validate_event_threat_detection_custom_module_request_object
+          command.response_representation = Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ValidateEventThreatDetectionCustomModuleResponse
+          command.params['parent'] = parent unless parent.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Creates a BigQuery export.
+        # Creates a resident Event Threat Detection custom module at the scope of the
+        # given Resource Manager parent, and also creates inherited custom modules for
+        # all descendants of the given parent. These modules are enabled by default.
         # @param [String] parent
-        #   Required. The name of the parent resource of the new BigQuery export. Its
-        #   format is "organizations/[organization_id]", "folders/[folder_id]", or "
-        #   projects/[project_id]".
-        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] google_cloud_securitycenter_v1_big_query_export_object
-        # @param [String] big_query_export_id
-        #   Required. Unique identifier provided by the client within the parent scope. It
-        #   must consist of only lowercase letters, numbers, and hyphens, must start with
-        #   a letter, must end with either a letter or a number, and must be 63 characters
-        #   or less.
+        #   Required. The new custom module's parent. Its format is: * "organizations/`
+        #   organization`/eventThreatDetectionSettings". * "folders/`folder`/
+        #   eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] event_threat_detection_custom_module_object
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -4807,32 +5548,34 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport]
+        # @return [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def create_project_big_query_export(parent, google_cloud_securitycenter_v1_big_query_export_object = nil, big_query_export_id: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:post, 'v1/{+parent}/bigQueryExports', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
-          command.request_object = google_cloud_securitycenter_v1_big_query_export_object
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport
+        def create_project_event_threat_detection_setting_custom_module(parent, event_threat_detection_custom_module_object = nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:post, 'v1/{+parent}/customModules', options)
+          command.request_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.request_object = event_threat_detection_custom_module_object
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
           command.params['parent'] = parent unless parent.nil?
-          command.query['bigQueryExportId'] = big_query_export_id unless big_query_export_id.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Deletes an existing BigQuery export.
+        # Deletes the specified Event Threat Detection custom module and all of its
+        # descendants in the Resource Manager hierarchy. This method is only supported
+        # for resident custom modules.
         # @param [String] name
-        #   Required. The name of the BigQuery export to delete. Its format is
-        #   organizations/`organization`/bigQueryExports/`export_id`, folders/`folder`/
-        #   bigQueryExports/`export_id`, or projects/`project`/bigQueryExports/`export_id`
+        #   Required. Name of the custom module to delete. Its format is: * "organizations/
+        #   `organization`/eventThreatDetectionSettings/customModules/`module`". * "
+        #   folders/`folder`/eventThreatDetectionSettings/customModules/`module`". * "
+        #   projects/`project`/eventThreatDetectionSettings/customModules/`module`".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -4850,7 +5593,7 @@ module Google
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def delete_project_big_query_export(name, fields: nil, quota_user: nil, options: nil, &block)
+        def delete_project_event_threat_detection_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:delete, 'v1/{+name}', options)
           command.response_representation = Google::Apis::SecuritycenterV1::Empty::Representation
           command.response_class = Google::Apis::SecuritycenterV1::Empty
@@ -4860,11 +5603,12 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Gets a BigQuery export.
+        # Gets an Event Threat Detection custom module.
         # @param [String] name
-        #   Required. Name of the BigQuery export to retrieve. Its format is organizations/
-        #   `organization`/bigQueryExports/`export_id`, folders/`folder`/bigQueryExports/`
-        #   export_id`, or projects/`project`/bigQueryExports/`export_id`
+        #   Required. Name of the custom module to get. Its format is: * "organizations/`
+        #   organization`/eventThreatDetectionSettings/customModules/`module`". * "folders/
+        #   `folder`/eventThreatDetectionSettings/customModules/`module`". * "projects/`
+        #   project`/eventThreatDetectionSettings/customModules/`module`".
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -4874,42 +5618,41 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport]
+        # @return [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def get_project_big_query_export(name, fields: nil, quota_user: nil, options: nil, &block)
+        def get_project_event_threat_detection_setting_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:get, 'v1/{+name}', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
           command.params['name'] = name unless name.nil?
           command.query['fields'] = fields unless fields.nil?
           command.query['quotaUser'] = quota_user unless quota_user.nil?
           execute_or_queue_command(command, &block)
         end
         
-        # Lists BigQuery exports. Note that when requesting BigQuery exports at a given
-        # level all exports under that level are also returned e.g. if requesting
-        # BigQuery exports under a folder, then all BigQuery exports immediately under
-        # the folder plus the ones created under the projects within the folder are
-        # returned.
+        # Lists all Event Threat Detection custom modules for the given Resource Manager
+        # parent. This includes resident modules defined at the scope of the parent
+        # along with modules inherited from ancestors.
         # @param [String] parent
-        #   Required. The parent, which owns the collection of BigQuery exports. Its
-        #   format is "organizations/[organization_id]", "folders/[folder_id]", "projects/[
-        #   project_id]".
+        #   Required. Name of the parent to list custom modules under. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
         # @param [Fixnum] page_size
-        #   The maximum number of configs to return. The service may return fewer than
+        #   The maximum number of modules to return. The service may return fewer than
         #   this value. If unspecified, at most 10 configs will be returned. The maximum
         #   value is 1000; values above 1000 will be coerced to 1000.
         # @param [String] page_token
-        #   A page token, received from a previous `ListBigQueryExports` call. Provide
-        #   this to retrieve the subsequent page. When paginating, all other parameters
-        #   provided to `ListBigQueryExports` must match the call that provided the page
-        #   token.
+        #   A page token, received from a previous `ListEventThreatDetectionCustomModules`
+        #   call. Provide this to retrieve the subsequent page. When paginating, all other
+        #   parameters provided to `ListEventThreatDetectionCustomModules` must match the
+        #   call that provided the page token.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user
@@ -4919,18 +5662,18 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse]
+        # @return [Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def list_project_big_query_exports(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
-          command = make_simple_command(:get, 'v1/{+parent}/bigQueryExports', options)
-          command.response_representation = Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::ListBigQueryExportsResponse
+        def list_project_event_threat_detection_setting_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/customModules', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListEventThreatDetectionCustomModulesResponse
           command.params['parent'] = parent unless parent.nil?
           command.query['pageSize'] = page_size unless page_size.nil?
           command.query['pageToken'] = page_token unless page_token.nil?
@@ -4939,15 +5682,65 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
-        # Updates a BigQuery export.
+        # Lists all resident Event Threat Detection custom modules under the given
+        # Resource Manager parent and its descendants.
+        # @param [String] parent
+        #   Required. Name of the parent to list custom modules under. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Fixnum] page_size
+        #   The maximum number of modules to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `
+        #   ListDescendantEventThreatDetectionCustomModules` call. Provide this to
+        #   retrieve the subsequent page. When paginating, all other parameters provided
+        #   to `ListDescendantEventThreatDetectionCustomModules` must match the call that
+        #   provided the page token.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_event_threat_detection_setting_custom_module_descendant(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/customModules:listDescendant', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListDescendantEventThreatDetectionCustomModulesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Updates the Event Threat Detection custom module with the given name based on
+        # the given update mask. Updating the enablement state is supported for both
+        # resident and inherited modules (though resident modules cannot have an
+        # enablement state of "inherited"). Updating the display name or configuration
+        # of a module is supported for resident modules only. The type of a module
+        # cannot be changed.
         # @param [String] name
-        #   The relative resource name of this export. See: https://cloud.google.com/apis/
-        #   design/resource_names#relative_resource_name. Example format: "organizations/`
-        #   organization_id`/bigQueryExports/`export_id`" Example format: "folders/`
-        #   folder_id`/bigQueryExports/`export_id`" Example format: "projects/`project_id`/
-        #   bigQueryExports/`export_id`" This field is provided in responses, and is
-        #   ignored when provided in create requests.
-        # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] google_cloud_securitycenter_v1_big_query_export_object
+        #   Immutable. The resource name of the Event Threat Detection custom module. Its
+        #   format is: * "organizations/`organization`/eventThreatDetectionSettings/
+        #   customModules/`module`". * "folders/`folder`/eventThreatDetectionSettings/
+        #   customModules/`module`". * "projects/`project`/eventThreatDetectionSettings/
+        #   customModules/`module`".
+        # @param [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] event_threat_detection_custom_module_object
         # @param [String] update_mask
         #   The list of fields to be updated. If empty all mutable fields will be updated.
         # @param [String] fields
@@ -4959,20 +5752,20 @@ module Google
         #   Request-specific options
         #
         # @yield [result, err] Result & error if block supplied
-        # @yieldparam result [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport] parsed result object
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule] parsed result object
         # @yieldparam err [StandardError] error object if request failed
         #
-        # @return [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport]
+        # @return [Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule]
         #
         # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
         # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
         # @raise [Google::Apis::AuthorizationError] Authorization is required
-        def patch_project_big_query_export(name, google_cloud_securitycenter_v1_big_query_export_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
+        def patch_project_event_threat_detection_setting_custom_module(name, event_threat_detection_custom_module_object = nil, update_mask: nil, fields: nil, quota_user: nil, options: nil, &block)
           command = make_simple_command(:patch, 'v1/{+name}', options)
-          command.request_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
-          command.request_object = google_cloud_securitycenter_v1_big_query_export_object
-          command.response_representation = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport::Representation
-          command.response_class = Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1BigQueryExport
+          command.request_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.request_object = event_threat_detection_custom_module_object
+          command.response_representation = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EventThreatDetectionCustomModule
           command.params['name'] = name unless name.nil?
           command.query['updateMask'] = update_mask unless update_mask.nil?
           command.query['fields'] = fields unless fields.nil?
@@ -4980,6 +5773,88 @@ module Google
           execute_or_queue_command(command, &block)
         end
         
+        # Gets an effective Event Threat Detection custom module at the given level.
+        # @param [String] name
+        #   Required. The resource name of the effective Event Threat Detection custom
+        #   module. Its format is: * "organizations/`organization`/
+        #   eventThreatDetectionSettings/effectiveCustomModules/`module`". * "folders/`
+        #   folder`/eventThreatDetectionSettings/effectiveCustomModules/`module`". * "
+        #   projects/`project`/eventThreatDetectionSettings/effectiveCustomModules/`module`
+        #   ".
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def get_project_event_threat_detection_setting_effective_custom_module(name, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+name}', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::EffectiveEventThreatDetectionCustomModule
+          command.params['name'] = name unless name.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
+        # Lists all effective Event Threat Detection custom modules for the given parent.
+        # This includes resident modules defined at the scope of the parent along with
+        # modules inherited from its ancestors.
+        # @param [String] parent
+        #   Required. Name of the parent to list custom modules for. Its format is: * "
+        #   organizations/`organization`/eventThreatDetectionSettings". * "folders/`folder`
+        #   /eventThreatDetectionSettings". * "projects/`project`/
+        #   eventThreatDetectionSettings".
+        # @param [Fixnum] page_size
+        #   The maximum number of modules to return. The service may return fewer than
+        #   this value. If unspecified, at most 10 configs will be returned. The maximum
+        #   value is 1000; values above 1000 will be coerced to 1000.
+        # @param [String] page_token
+        #   A page token, received from a previous `
+        #   ListEffectiveEventThreatDetectionCustomModules` call. Provide this to retrieve
+        #   the subsequent page. When paginating, all other parameters provided to `
+        #   ListEffectiveEventThreatDetectionCustomModules` must match the call that
+        #   provided the page token.
+        # @param [String] fields
+        #   Selector specifying which fields to include in a partial response.
+        # @param [String] quota_user
+        #   Available to use for quota purposes for server-side applications. Can be any
+        #   arbitrary string assigned to a user, but should not exceed 40 characters.
+        # @param [Google::Apis::RequestOptions] options
+        #   Request-specific options
+        #
+        # @yield [result, err] Result & error if block supplied
+        # @yieldparam result [Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse] parsed result object
+        # @yieldparam err [StandardError] error object if request failed
+        #
+        # @return [Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse]
+        #
+        # @raise [Google::Apis::ServerError] An error occurred on the server and the request can be retried
+        # @raise [Google::Apis::ClientError] The request is invalid and should not be retried without modification
+        # @raise [Google::Apis::AuthorizationError] Authorization is required
+        def list_project_event_threat_detection_setting_effective_custom_modules(parent, page_size: nil, page_token: nil, fields: nil, quota_user: nil, options: nil, &block)
+          command = make_simple_command(:get, 'v1/{+parent}/effectiveCustomModules', options)
+          command.response_representation = Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse::Representation
+          command.response_class = Google::Apis::SecuritycenterV1::ListEffectiveEventThreatDetectionCustomModulesResponse
+          command.params['parent'] = parent unless parent.nil?
+          command.query['pageSize'] = page_size unless page_size.nil?
+          command.query['pageToken'] = page_token unless page_token.nil?
+          command.query['fields'] = fields unless fields.nil?
+          command.query['quotaUser'] = quota_user unless quota_user.nil?
+          execute_or_queue_command(command, &block)
+        end
+        
         # Kicks off an LRO to bulk mute findings for a parent based on a filter. The
         # parent can be either an organization, folder or project. The findings matched
         # by the filter will be muted after the LRO is done.
@@ -5718,7 +6593,9 @@ module Google
         #   numeric id containing 1-20 digits.
         # @param [Google::Apis::SecuritycenterV1::GoogleCloudSecuritycenterV1SecurityHealthAnalyticsCustomModule] google_cloud_securitycenter_v1_security_health_analytics_custom_module_object
         # @param [String] update_mask
-        #   The list of fields to update.
+        #   The list of fields to be updated. The only fields that can be updated are `
+        #   enablement_state` and `custom_config`. If empty or set to the wildcard value `*
+        #   `, both `enablement_state` and `custom_config` are updated.
         # @param [String] fields
         #   Selector specifying which fields to include in a partial response.
         # @param [String] quota_user